Questions tagged [iproute]
Questions that include employing tools of the IPROUTE2 Utility Suite, especially ip and tc.
304
questions
0
votes
1
answer
14
views
Mikrotik: strange behavior with multi WAN routing
router is connected to global network via one phisical port.
ovpn connection is established by mikrotik
I need to route some destination addresses address-list=vpn_list via ovpn. This list is ...
- 101
1
vote
1
answer
31
views
Routing between 2 interfaces on a host
I seem to be having trouble reaching an application that is running on the 2nd interface on my Ubuntu workstation.
Kernel/OS
Linux 6.5.0-18-generic #18~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Wed Feb 7 11:...
- 11
1
vote
1
answer
82
views
How to route between three containers connected by two networks in series
I'm running into some issues with routing between docker networks. Hence, I broke the problem down into a simpler case but it is still not working. Can you tell me what I am doing wrong?
The Setup
...
- 21
0
votes
1
answer
81
views
Isolated linux bridge interfaces can't ping neighbours
I'm trying to do a learning experiment with linux bridges. I wan't to create an isolated bridge on host without namespaces with the ability to debug interface connectivity.
I want to be able ping ...
0
votes
1
answer
103
views
Virtual network interface and route(s) to bypass VPN
I'm frequently connected to a system-wide VPN which I need to bypass for certain applications. On my home network I currently run a SOCKS proxy on another box which I use, for example, in a separate &...
- 172
1
vote
1
answer
131
views
List openvswitch virtual switch with ip command
I've configured openvswitch virtual switch and can list it with ip command as follows:
# Show all interfaces
ip link
Output:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN ...
- 529
0
votes
2
answers
39
views
Route traffic to device with a static IP address via specified interface - not working?
I have a single device which I have configured with a static IP address (192.168.1.16) and it is wired directly to the 4th port (enp4s0) on my Ubuntu Linux PC. The m/c is also connected to my LAN via ...
0
votes
1
answer
46
views
Use VPN connection only for selected applications
I am trying to follow: https://superuser.com/a/1262250/41337 but I cannot make it work.
I do:
interface=eth0
down() {
ip netns delete myvpn
ip link delete vpn0
iptables -D INPUT \! -i ...
- 36k
0
votes
1
answer
27
views
Forcing container to route outbound through VPN - source-based routing not working
I need to ensure outbound traffic from a specific (Docker) container is tunneled through my (WireGuard) VPN (running on my VPS) to exit to the Internet with my VPS external IP, but I am not being ...
- 1
0
votes
0
answers
161
views
How to use AFWall+ to forward packets through a wireguard VPN to a tethered device?
situation is pretty simple, but I've spending the last 3 days trying to find a solution to this with no luck.
I have a printer at home that I need to have access to from my laptop. The printer is in a ...
- 101
1
vote
1
answer
135
views
How exactly does Linux use the prefix length assigned to network interface?
I assigned IP address 192.168.0.1/24 to eth0 in two ways.
A. Adding 192.168.0.1/24 as usual
# ip addr add 192.168.0.1/24 dev eth0
# ping -c 1 192.168.0.2
PING 192.168.0.2 (192.168.0.2) 56(84) bytes of ...
- 33
3
votes
1
answer
2k
views
Meaning of prefix length with ip addr add noprefixroute
When assigning an ip address to a network interface with ip addr add noprefixroute, what effect will the specified prefix length have? When noprefixroute is not used, the prefix length is used to ...
- 133
0
votes
0
answers
29
views
Centos 7 Policy Based Routing not working CEntos 6 no problem
Centos 7 Policy Based Routing not working CEntos 6 no problem
How can i transfer my static based routing policies from Centos 6 to 7 ...
I have two WAN ip/gateways, 1 LAN ip address on on NIC . .
...
- 199
0
votes
1
answer
82
views
Where does `ip addr` get its data from?
I looked at the source code and am stuck after line 2269. I have a feeling that just like route, this utility also, is using the procfs filesystem but I can't quite put my finger on it.
- 159
0
votes
1
answer
143
views
How does the "route" utility make sense of the data in /proc/net/route?
result of cat /proc/net/route:
Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT
wlo1 ...
- 159
0
votes
0
answers
28
views
pushed openvpn client routes makes the http-proxy server to stop functioning, ip route advice required
I have both a proxy server and openvpn client running on an openWRT router,
I have to setup a proxy server on the router and then connect the OpenVPN client running on the same router, because the ISP ...
- 1
0
votes
0
answers
42
views
How to create a second GUE tunnel on a different port
How can multiple GUE tunnels be created in the same (default) network namespace with the same remote IP address, but different ports?
So far, I've been successfully able to create exactly one GUE ...
- 101
0
votes
1
answer
138
views
Outgoing docker packets not respecting routing rules
I have a private docker host (A) connected via a Wireguard tunnel to a public "router" in a cloud environment (B).
Wireguard:
(Docker Container)
eth0 172.17.0.2
|
docker0 172.17.0.1
(A) eth0 ...
- 103
3
votes
1
answer
91
views
Why can the lifetimes reported by ip address be slightly higher than the content of a received IPv6 Router Advertisement?
I'm currently investigating a strange network issue.
Consider the following IPv6 Router Advertisement (note the prefix lifetimes, 5400 and 2700, respectively.):
$ rdisc6 -1 wlan0
Soliciting ff02::2 (...
- 143
0
votes
1
answer
72
views
Policy based routing cause NAT not to work correctly
echo "200 rj45" >> /etc/iproute2/rt_tables
echo "201 WIFI" >> /etc/iproute2/rt_tables
ip route add default via 192.168.5.9 dev eth0
ip rule add from 192.168.5.8/24 ...
0
votes
0
answers
87
views
Forcing packets through a TUN interface on Mac?
I am wanting to build a toy VPN server/client. This isn't impossible to setup on Linux due to the beautiful iproute2 package and granular routing control. However, on Mac the experience has been ...
- 1
0
votes
1
answer
109
views
Why does `ip route show` not produce any output in my script from systemd service
Service..
[Unit]
Description=testing
Requires=network-online.target
After=NetworkManager.service
[Service]
SyslogIdentifier=testing
Type=oneshot
ExecStart=test.sh
[Install]
WantedBy=network-online....
user168989
0
votes
0
answers
321
views
Can't add secondary gateway for secondary interface in Ubuntu 22.04
I have two interfaces and both of them have a public IP address. One of them (eth0) is primary and the other one (eth1) is secondary. I'm trying to setup it through netplan + iproute2. When I was on ...
- 105
0
votes
1
answer
68
views
docker bridge can't reach external address defined as `route via`
I have 3 raspberry pi in a daisy-chain network, with ip routes and iptables accept fwd - all three hosts can reach each others:
A <--> B <--> C
However a container from docker-compose ...
- 101
2
votes
1
answer
233
views
Can't ping devices on LAN
I've got 2 Access Points attached to my laptop's ethernet port via a PoE switch. I've assigned static IPs & names to them with dnxmasq (successfully, I believe). However, ping and ssh say they're ...
- 183
1
vote
1
answer
2k
views
Understanding the use of 'src' attribute in Linux routing tables
I have a question about a route table in linux which “ip route show” command displays.
I understand what “src” attribute is like based on this link.
http://linux-ip.net/html/routing-saddr-selection....
- 11
0
votes
1
answer
934
views
Route traffic from one IP address through a different interface
I have a local and a remote network. My local network has a router, ubuntu box and TV. The remote network has a router and a raspberry pi. The local ubuntu box and remote raspberry pi are connected ...
1
vote
0
answers
2k
views
Remove default route on AlmaLinux 9 / RH9
I'm running AlmaLinux 9 (a red hat 9 clone), and I would like to permanently remove a default route. My routing table is shown below, and I would like to remove the 172.31.252.1 route.
I know how to ...
- 1,768
2
votes
1
answer
705
views
In which order is routing of packets defined if VRF and ip rules are defined?
On a system are VRFs, multiple routing tables and rules defined. A local service (SSH) is not reachable via one interface (WAN interface that is in a VRF) while it is reachable from other interfaces. ...
- 208
0
votes
0
answers
20
views
Routing internet traffic via the vpn interface
I have a wifi dongle where I have three interfaces wlan0 (default route), uvpn0(VPN interface) and usb0(interface between the host machine and the dongle).
usb0 Link encap:Ethernet HWaddr DA:CE:...
1
vote
1
answer
146
views
Macvtap connectivity lost after a few hours?
I setup a macvtap interface like this:
ip link add link eth0 vlan type macvlan mode bridge
ip address add 10.0.0.17 dev vlan
ip link set dev vlan up
ip route flush dev eth0
ip route flush dev vlan
ip ...
- 201
0
votes
0
answers
306
views
Tunneling traffic from socks5 proxy to VPN tun
I have the following setup:
______________________________
| |
| Client |
...
- 1
2
votes
1
answer
2k
views
What is the difference between using Linux VRF, network namespaces and using different routing tables?
The ip-vrf manual reads :
A VRF provides traffic isolation at layer 3 for routing, similar to how a VLAN is used to isolate traffic at layer 2. Fundamentally, a VRF is a separate routing table.
At ...
- 21
0
votes
0
answers
255
views
Assistance routing external incoming traffic to interface
I need assistance creating a ip route that forces traffic coming into my VPS's public IP on port 27016 or 3202 to my Wireguard VPN tunnel.
For context, I created this VPS to allow me to expose my ...
1
vote
0
answers
329
views
Wireguard mesh with star-shaped failover
I'm currently trying to convert my star-shaped wireguard setup into a mesh-based one with a single server as a fallback node if the direct routes are not reachable. The goal is to reduce latency and ...
- 11
1
vote
1
answer
117
views
Ip routing Linux subnet to an external IP
Good morning
I have a scenario where an application makes a request to service A on IP 10.244.5.0 which is not really in use. The goal is to send all request of a subnet (where the service A IP is ...
- 13
2
votes
1
answer
655
views
How do I get the interface name created with `ip tuntap add mode tap`
I want to create a tap with sudo, and then attach the user space program (ssh) to it.
I don't want to hard code the interface name, as multiple users will be using it, so I want the interface name to ...
- 1,720
2
votes
1
answer
3k
views
Manage two network interfaces on RHEL 8
I'am looking to set up a configuration on a dual network RHEL8 enterprise machine hosting web services (web server, APIs, gitlab...). The machine has two network interfaces : eno1 for the local ...
- 23
0
votes
1
answer
1k
views
Route all traffic from one interface (default gateway) through OpenVPN / tun0 - policy based routing, dependent on source address/interface
I have a Debian Linux VPN router myvpnserver with 2 interfaces, eno1 and eno2:
eno1 is connected to a LAN and an internet router. On this interface with static IP address, myvpnserver has its default ...
- 135
3
votes
0
answers
106
views
What exactly is the `/etc/net` project?
I was reading about iproute2 here and I saw the following sentence:
The /etc/net project aims to support most modern network technologies, as it doesn't use ifconfig and allows a system administrator ...
- 243
1
vote
0
answers
2k
views
multicast to all interfaces (how to set up the routes?)
I want a host to send out multicast traffic to all interfaces, but it seems I can only have one route.
I tried ip route add 224/4 dev eth0, and then ip route add 224/4 dev sit1, but the second one was ...
- 1,553
1
vote
0
answers
106
views
Wireguard to endpoint Inside a Namespace
I have three VM's. VM-A,VM-B & VM-X. I have a application running on the backend server VM-X. VM-A is the Main frontend server which has high capacity. VM-B is just a standby server of low ...
- 378
2
votes
1
answer
15k
views
How to route all traffic from a specific interface to a specific gateway instead of default route?
On my machine I have two interfaces: wlan0 (default route) and tun0.
The tun0 interface is just a local network, it's ip range is 172.16.150.0/24, my machine's (machine A) IP address is 172.16.150.1, ...
- 143
1
vote
1
answer
1k
views
Why is my namespace not detected?
I tried form home,then sudo su -
ip netns exec 5bd337503b01 ip addr show
Cannot open network namespace "5bd337503b01": No such file or directory
pwd shows
/var/run/docker/netns
Why?
- 319
1
vote
1
answer
4k
views
How to access LAN behind VPN client from server?
I have a cloud VM running an OpenVPN server
On the other side, I have a Synology NAS inside a private network.
I would like to access the client's LAN (192.168.1.0/24) from the server.
On the server, ...
- 447
0
votes
2
answers
15k
views
Persistent static routes on Debian 11
I'm trying to set up a testing lab such as the following:
P.D: Is not Metasploit, but Metasploitable.
I'm running VirtualBox, and the routers are 2 VMs running Debian 11. Each router has 2 interfaces:...
3
votes
1
answer
656
views
Can I change the order of IP addresses in Linux?
I'm running into some networking issues that seem to be related to the order of IP addresses, as displayed in iproute2. This is what it normally looks like:
# ip -4 -o address show dev eth0
2: eth0 ...
- 31
1
vote
0
answers
5k
views
Routing problem shows this Error: Nexthop has invalid gateway
I am trying to route some traffic over a VPN (to certain IPs) and other via my normal connection. To do this I am trying to add a static route to make traffic to some IPs bypass the VPN tunnel.
Very ...
- 173
0
votes
0
answers
20
views
Issue with adding a route to a sub-network card
I'm trying to add any route to a sub-network card eth0:1. When I'm running "ip route list" then this command prints the saved rule for eth0 not for eth0:1. Why ? How to solve that?
ip route ...
- 113
1
vote
1
answer
422
views
How to config static route from two subnets to firewall
Well, one picture for thousand words. 3 private subnets:
+-----+ +-----+
| PC2 | | PC3 |
...
- 1,320